Warning: Permanently added '10.128.0.190' (ED25519) to the list of known hosts. 2025/08/23 05:36:53 parsed 1 programs [ 63.666222][ T4270] cgroup: Unknown subsys name 'net' [ 63.824881][ T4270] cgroup: Unknown subsys name 'rlimit' [ 65.073589][ T4270] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 67.224543][ T4298] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 67.233355][ T4298] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 67.249399][ T4298] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 67.270345][ T4298] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 67.278694][ T4298] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 67.286197][ T4298] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 68.194586][ T4323] chnl_net:caif_netlink_parms(): no params data found [ 68.244675][ T4323] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.252230][ T4323] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.262352][ T4323] device bridge_slave_0 entered promiscuous mode [ 68.270992][ T4323] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.278153][ T4323] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.288300][ T4323] device bridge_slave_1 entered promiscuous mode [ 68.314060][ T4323] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.325428][ T4323] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.354161][ T4323] team0: Port device team_slave_0 added [ 68.363125][ T4323] team0: Port device team_slave_1 added [ 68.379048][ T4323] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.386322][ T4323] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.412690][ T4323] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.433440][ T4323] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.440674][ T4323] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.466996][ T4323] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.493494][ T4323] device hsr_slave_0 entered promiscuous mode [ 68.500633][ T4323] device hsr_slave_1 entered promiscuous mode [ 68.610746][ T4323] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 68.620895][ T4323] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 68.638843][ T4323] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 68.648159][ T4323] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 68.669185][ T4323] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.676514][ T4323] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.684537][ T4323] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.691868][ T4323] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.739114][ T4323] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.760605][ T1152] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 68.772237][ T1152] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.782061][ T1152] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.801548][ T4323] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.814530][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 68.822955][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.830248][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.853941][ T1152] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 68.862683][ T1152] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.869881][ T1152] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.888531][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 68.898058][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 68.914381][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 68.933940][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 68.945194][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 68.956674][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 69.138265][ T1152] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 69.146256][ T1152] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 69.161862][ T4323] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.178106][ T1152] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 69.187183][ T1152] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 69.204507][ T1152] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 69.214868][ T1152] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 69.223693][ T1152] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 69.231962][ T1152] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 69.247494][ T4323] device veth0_vlan entered promiscuous mode [ 69.258665][ T4323] device veth1_vlan entered promiscuous mode [ 69.281441][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 69.289667][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 69.298245][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 69.307072][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 69.322381][ T4323] device veth0_macvtap entered promiscuous mode [ 69.332042][ T4323] device veth1_macvtap entered promiscuous mode [ 69.346188][ T4323] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.354314][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 69.364462][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 69.372697][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 69.381801][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 69.395323][ T4323] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.405028][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 69.415602][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 69.437313][ T4323] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.446746][ T4323] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.455811][ T4323] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.464781][ T4323] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.924827][ T41] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.206425][ T4356] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.218221][ T4356] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.234264][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 70.244539][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.252979][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.261908][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 2025/08/23 05:37:01 executed programs: 0 [ 70.568904][ T48] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 70.576851][ T48] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 70.585826][ T48] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 70.593856][ T48] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 70.602406][ T48] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 70.609669][ T48] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 70.718163][ T4367] chnl_net:caif_netlink_parms(): no params data found [ 70.753695][ T4367] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.761074][ T4367] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.768919][ T4367] device bridge_slave_0 entered promiscuous mode [ 70.777132][ T4367] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.784492][ T4367] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.792851][ T4367] device bridge_slave_1 entered promiscuous mode [ 70.817698][ T4367] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.829404][ T4367] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.850954][ T4367] team0: Port device team_slave_0 added [ 70.858235][ T4367] team0: Port device team_slave_1 added [ 70.879463][ T4367] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.886865][ T4367] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.913283][ T4367] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.925805][ T4367] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.933053][ T4367] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.959384][ T4367] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.985901][ T4367] device hsr_slave_0 entered promiscuous mode [ 70.993083][ T4367] device hsr_slave_1 entered promiscuous mode [ 70.999610][ T4367] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 71.007456][ T4367] Cannot create hsr debugfs directory [ 71.102048][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.108789][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 72.069261][ T41] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.700881][ T4298] Bluetooth: hci0: command 0x0409 tx timeout [ 74.339044][ T41] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.411186][ T41] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.780491][ T48] Bluetooth: hci0: command 0x041b tx timeout [ 75.273506][ T4367] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 75.283888][ T4367] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 75.294775][ T4367] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 75.305325][ T4367] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 75.401520][ T4367] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.414010][ T4356] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 75.423252][ T4356] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 75.436846][ T41] device hsr_slave_0 left promiscuous mode [ 75.443306][ T41] device hsr_slave_1 left promiscuous mode [ 75.449573][ T41] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 75.457355][ T41] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 75.465671][ T41] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 75.473581][ T41] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 75.481496][ T41] device bridge_slave_1 left promiscuous mode [ 75.488221][ T41] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.497976][ T41] device bridge_slave_0 left promiscuous mode [ 75.504883][ T41] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.521371][ T41] device veth1_macvtap left promiscuous mode [ 75.527594][ T41] device veth0_macvtap left promiscuous mode [ 75.534064][ T41] device veth1_vlan left promiscuous mode [ 75.540235][ T41] device veth0_vlan left promiscuous mode [ 75.798503][ T41] team0 (unregistering): Port device team_slave_1 removed [ 75.825857][ T41] team0 (unregistering): Port device team_slave_0 removed [ 75.852675][ T41] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 75.881813][ T41] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 76.119689][ T41] bond0 (unregistering): Released all slaves [ 76.181535][ T4367] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.192274][ T4356] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 76.201542][ T4356] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 76.211267][ T4356] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.218405][ T4356] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.228361][ T4356] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 76.228877][ T3533] cfg80211: failed to load regulatory.db [ 76.262368][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 76.275358][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 76.285488][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.292685][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.305780][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 76.317307][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 76.330260][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 76.343003][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 76.352208][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 76.364459][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 76.373674][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 76.396151][ T4367] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 76.409373][ T4367] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 76.428137][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 76.438306][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 76.451408][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 76.464031][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 76.473589][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 76.814070][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 76.823831][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 76.836805][ T4367] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.858349][ T4356] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 76.868119][ T4356] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 76.869922][ T48] Bluetooth: hci0: command 0x040f tx timeout [ 76.893481][ T4356] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 76.903849][ T4356] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 76.912327][ T4356] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 76.920468][ T4356] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 76.931078][ T4367] device veth0_vlan entered promiscuous mode [ 76.946008][ T4367] device veth1_vlan entered promiscuous mode [ 76.964203][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 76.973510][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 76.983614][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 76.992554][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 77.002819][ T4367] device veth0_macvtap entered promiscuous mode [ 77.012846][ T4367] device veth1_macvtap entered promiscuous mode [ 77.045426][ T4367] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.055395][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 77.079628][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 77.088458][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 77.099927][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 77.116264][ T4367] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.127769][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 77.137140][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 77.147343][ T4367] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.156740][ T4367] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.165871][ T4367] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.175426][ T4367] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.227453][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.244316][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.254794][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.256167][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 77.264561][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.279897][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 77.485600][ T4419] loop0: detected capacity change from 0 to 32768 [ 77.524217][ T4419] [ 77.524217][ T4419] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 77.524217][ T4419] [ 77.546703][ T4419] read_mapping_page failed! [ 77.560277][ T4419] ERROR: (device loop0): txCommit: [ 77.560277][ T4419] [ 77.575445][ T4419] read_mapping_page failed! [ 77.582049][ T4419] ERROR: (device loop0): txCommit: [ 77.582049][ T4419] [ 77.592182][ T4419] ================================================================== [ 77.600389][ T4419] BUG: KASAN: slab-out-of-bounds in dtSplitPage+0x10d4/0x31d0 [ 77.607971][ T4419] Read of size 1 at addr ffff888068f78935 by task syz.0.17/4419 [ 77.615645][ T4419] [ 77.617992][ T4419] CPU: 1 PID: 4419 Comm: syz.0.17 Not tainted 6.1.148-syzkaller #0 [ 77.625922][ T4419] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 77.636020][ T4419] Call Trace: [ 77.639320][ T4419] [ 77.642278][ T4419] dump_stack_lvl+0x168/0x22e [ 77.647074][ T4419] ? __lock_acquire+0x7c50/0x7c50 [ 77.652153][ T4419] ? show_regs_print_info+0x12/0x12 [ 77.657376][ T4419] ? load_image+0x3b0/0x3b0 [ 77.661914][ T4419] ? __virt_addr_valid+0x465/0x540 [ 77.667053][ T4419] ? dtSplitPage+0x10d4/0x31d0 [ 77.671847][ T4419] print_report+0xa8/0x210 [ 77.676293][ T4419] kasan_report+0x10b/0x140 [ 77.680832][ T4419] ? dtSplitPage+0x10d4/0x31d0 [ 77.685630][ T4419] dtSplitPage+0x10d4/0x31d0 [ 77.690364][ T4419] ? clear_nonspinnable+0x60/0x60 [ 77.695501][ T4419] dtInsert+0xfbd/0x58a0 [ 77.699748][ T4419] ? __kmem_cache_free+0xb6/0x1f0 [ 77.704843][ T4419] ? UniStrupr+0x2e0/0x2e0 [ 77.709255][ T4419] ? dtSearch+0x1c67/0x2050 [ 77.713932][ T4419] jfs_symlink+0x70f/0xe60 [ 77.718346][ T4419] ? jfs_unlink+0xa40/0xa40 [ 77.722849][ T4419] ? make_kgid+0x640/0x640 [ 77.727272][ T4419] ? apparmor_path_symlink+0x1a3/0x220 [ 77.732911][ T4419] ? lookup_one_qstr_excl+0x11c/0x240 [ 77.738373][ T4419] ? generic_permission+0x230/0x510 [ 77.743592][ T4419] ? inode_permission+0xef/0x480 [ 77.748533][ T4419] ? bpf_lsm_inode_symlink+0x5/0x10 [ 77.753733][ T4419] ? security_inode_symlink+0xb2/0x100 [ 77.759199][ T4419] vfs_symlink+0x247/0x3d0 [ 77.763621][ T4419] do_symlinkat+0x1ae/0x3f0 [ 77.768156][ T4419] ? vfs_symlink+0x3d0/0x3d0 [ 77.772758][ T4419] ? getname_flags+0x206/0x500 [ 77.777803][ T4419] __x64_sys_symlink+0x7a/0x90 [ 77.782556][ T4419] do_syscall_64+0x4c/0xa0 [ 77.786961][ T4419] ? clear_bhb_loop+0x60/0xb0 [ 77.791730][ T4419] ? clear_bhb_loop+0x60/0xb0 [ 77.796399][ T4419] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 77.802374][ T4419] RIP: 0033:0x7f58c298ebe9 [ 77.807035][ T4419] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 77.826715][ T4419] RSP: 002b:00007ffeb9bbb4c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000058 [ 77.835229][ T4419] RAX: ffffffffffffffda RBX: 00007f58c2bb5fa0 RCX: 00007f58c298ebe9 [ 77.843217][ T4419] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000200000000080 [ 77.851656][ T4419] RBP: 00007f58c2a11e19 R08: 0000000000000000 R09: 0000000000000000 [ 77.859746][ T4419] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 77.867767][ T4419] R13: 00007f58c2bb5fa0 R14: 00007f58c2bb5fa0 R15: 0000000000000002 [ 77.875732][ T4419] [ 77.878740][ T4419] [ 77.881061][ T4419] Allocated by task 4419: [ 77.885381][ T4419] kasan_set_track+0x4b/0x70 [ 77.890067][ T4419] __kasan_slab_alloc+0x6b/0x80 [ 77.894982][ T4419] slab_post_alloc_hook+0x4b/0x480 [ 77.900095][ T4419] kmem_cache_alloc_lru+0x11a/0x2e0 [ 77.905337][ T4419] jfs_alloc_inode+0x24/0x60 [ 77.910009][ T4419] iget_locked+0x1a9/0x830 [ 77.914519][ T4419] jfs_iget+0x20/0x3c0 [ 77.918690][ T4419] jfs_lookup+0x1c2/0x380 [ 77.923027][ T4419] __lookup_slow+0x27d/0x3a0 [ 77.927640][ T4419] lookup_slow+0x53/0x70 [ 77.931908][ T4419] walk_component+0x2be/0x3f0 [ 77.936653][ T4419] path_lookupat+0x169/0x440 [ 77.941334][ T4419] filename_lookup+0x1f0/0x500 [ 77.946467][ T4419] user_path_at_empty+0x3e/0x60 [ 77.951329][ T4419] __se_sys_chdir+0x91/0x280 [ 77.955999][ T4419] do_syscall_64+0x4c/0xa0 [ 77.960576][ T4419] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 77.966712][ T4419] [ 77.969048][ T4419] The buggy address belongs to the object at ffff888068f78000 [ 77.969048][ T4419] which belongs to the cache jfs_ip of size 2240 [ 77.982729][ T4419] The buggy address is located 117 bytes to the right of [ 77.982729][ T4419] 2240-byte region [ffff888068f78000, ffff888068f788c0) [ 77.996611][ T4419] [ 77.998922][ T4419] The buggy address belongs to the physical page: [ 78.005420][ T4419] page:ffffea0001a3de00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x68f78 [ 78.015551][ T4419] head:ffffea0001a3de00 order:3 compound_mapcount:0 compound_pincount:0 [ 78.024318][ T4419] memcg:ffff88807db8af01 [ 78.028554][ T4419] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 78.036805][ T4419] raw: 00fff00000010200 0000000000000000 dead000000000122 ffff888019b94a00 [ 78.045389][ T4419] raw: 0000000000000000 00000000800d000d 00000001ffffffff ffff88807db8af01 [ 78.054060][ T4419] page dumped because: kasan: bad access detected [ 78.060717][ T4419] page_owner tracks the page as allocated [ 78.066498][ T4419] page last allocated via order 3, migratetype Reclaimable, gfp_mask 0x1d2050(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL|__GFP_RECLAIMABLE), pid 4419, tgid 4419 (syz.0.17), ts 77540655498, free_ts 14346604557 [ 78.090373][ T4419] post_alloc_hook+0x173/0x1a0 [ 78.095135][ T4419] get_page_from_freelist+0x1a26/0x1ac0 [ 78.100714][ T4419] __alloc_pages+0x1df/0x4e0 [ 78.105337][ T4419] alloc_slab_page+0x5d/0x160 [ 78.110011][ T4419] new_slab+0x87/0x2c0 [ 78.114082][ T4419] ___slab_alloc+0xbc6/0x1220 [ 78.118761][ T4419] kmem_cache_alloc_lru+0x1ae/0x2e0 [ 78.123962][ T4419] jfs_alloc_inode+0x24/0x60 [ 78.128551][ T4419] iget_locked+0x1a9/0x830 [ 78.133006][ T4419] jfs_iget+0x20/0x3c0 [ 78.137161][ T4419] jfs_lookup+0x1c2/0x380 [ 78.141475][ T4419] __lookup_slow+0x27d/0x3a0 [ 78.146154][ T4419] lookup_slow+0x53/0x70 [ 78.150491][ T4419] walk_component+0x2be/0x3f0 [ 78.155301][ T4419] path_lookupat+0x169/0x440 [ 78.159894][ T4419] filename_lookup+0x1f0/0x500 [ 78.164639][ T4419] page last free stack trace: [ 78.169819][ T4419] free_unref_page_prepare+0x8b4/0x9a0 [ 78.175284][ T4419] free_unref_page+0x2e/0x3f0 [ 78.180006][ T4419] free_contig_range+0x9d/0x150 [ 78.184859][ T4419] destroy_args+0xef/0x8bf [ 78.189369][ T4419] debug_vm_pgtable+0x32a/0x37e [ 78.194213][ T4419] do_one_initcall+0x214/0x7a0 [ 78.198976][ T4419] do_initcall_level+0x137/0x1e4 [ 78.204116][ T4419] do_initcalls+0x4b/0x8a [ 78.208521][ T4419] kernel_init_freeable+0x3fa/0x5ac [ 78.213890][ T4419] kernel_init+0x19/0x1b0 [ 78.218314][ T4419] ret_from_fork+0x1f/0x30 [ 78.222818][ T4419] [ 78.225141][ T4419] Memory state around the buggy address: [ 78.231220][ T4419] ffff888068f78800: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 78.239268][ T4419] ffff888068f78880: 00 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc [ 78.247320][ T4419] >ffff888068f78900: fc fc fc fc fc fc fc fc fa fb fb fb fb fb fb fb [ 78.255627][ T4419] ^ [ 78.261265][ T4419] ffff888068f78980: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 78.269406][ T4419] ffff888068f78a00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 78.277446][ T4419] ================================================================== [ 78.293066][ T4419] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 78.300500][ T4419] CPU: 1 PID: 4419 Comm: syz.0.17 Not tainted 6.1.148-syzkaller #0 [ 78.308700][ T4419] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 78.318752][ T4419] Call Trace: [ 78.322020][ T4419] [ 78.324958][ T4419] dump_stack_lvl+0x168/0x22e [ 78.329797][ T4419] ? memcpy+0x3c/0x60 [ 78.333817][ T4419] ? show_regs_print_info+0x12/0x12 [ 78.339003][ T4419] ? load_image+0x3b0/0x3b0 [ 78.343502][ T4419] panic+0x2c9/0x710 [ 78.347391][ T4419] ? bpf_jit_dump+0xd0/0xd0 [ 78.351963][ T4419] ? _raw_spin_unlock_irqrestore+0xf6/0x100 [ 78.357842][ T4419] ? _raw_spin_unlock+0x40/0x40 [ 78.362674][ T4419] ? print_memory_metadata+0x314/0x400 [ 78.368147][ T4419] check_panic_on_warn+0x80/0xa0 [ 78.373167][ T4419] ? dtSplitPage+0x10d4/0x31d0 [ 78.377939][ T4419] end_report+0x66/0x110 [ 78.382179][ T4419] kasan_report+0x118/0x140 [ 78.386771][ T4419] ? dtSplitPage+0x10d4/0x31d0 [ 78.391544][ T4419] dtSplitPage+0x10d4/0x31d0 [ 78.396158][ T4419] ? clear_nonspinnable+0x60/0x60 [ 78.401207][ T4419] dtInsert+0xfbd/0x58a0 [ 78.405470][ T4419] ? __kmem_cache_free+0xb6/0x1f0 [ 78.410502][ T4419] ? UniStrupr+0x2e0/0x2e0 [ 78.414949][ T4419] ? dtSearch+0x1c67/0x2050 [ 78.419465][ T4419] jfs_symlink+0x70f/0xe60 [ 78.423885][ T4419] ? jfs_unlink+0xa40/0xa40 [ 78.428399][ T4419] ? make_kgid+0x640/0x640 [ 78.432818][ T4419] ? apparmor_path_symlink+0x1a3/0x220 [ 78.438287][ T4419] ? lookup_one_qstr_excl+0x11c/0x240 [ 78.443726][ T4419] ? generic_permission+0x230/0x510 [ 78.449034][ T4419] ? inode_permission+0xef/0x480 [ 78.454108][ T4419] ? bpf_lsm_inode_symlink+0x5/0x10 [ 78.459400][ T4419] ? security_inode_symlink+0xb2/0x100 [ 78.464865][ T4419] vfs_symlink+0x247/0x3d0 [ 78.469286][ T4419] do_symlinkat+0x1ae/0x3f0 [ 78.473851][ T4419] ? vfs_symlink+0x3d0/0x3d0 [ 78.478448][ T4419] ? getname_flags+0x206/0x500 [ 78.483226][ T4419] __x64_sys_symlink+0x7a/0x90 [ 78.487994][ T4419] do_syscall_64+0x4c/0xa0 [ 78.492453][ T4419] ? clear_bhb_loop+0x60/0xb0 [ 78.497137][ T4419] ? clear_bhb_loop+0x60/0xb0 [ 78.501846][ T4419] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 78.507995][ T4419] RIP: 0033:0x7f58c298ebe9 [ 78.512423][ T4419] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 78.532042][ T4419] RSP: 002b:00007ffeb9bbb4c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000058 [ 78.540560][ T4419] RAX: ffffffffffffffda RBX: 00007f58c2bb5fa0 RCX: 00007f58c298ebe9 [ 78.548977][ T4419] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000200000000080 [ 78.557302][ T4419] RBP: 00007f58c2a11e19 R08: 0000000000000000 R09: 0000000000000000 [ 78.565456][ T4419] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 78.573526][ T4419] R13: 00007f58c2bb5fa0 R14: 00007f58c2bb5fa0 R15: 0000000000000002 [ 78.581531][ T4419] [ 78.584996][ T4419] Kernel Offset: disabled [ 78.589336][ T4419] Rebooting in 86400 seconds..